Peripheral

Question

Disable autorun feature

I ran a vulnerability scan against one of my workstations. It showed that I needed to disable the execution of the Autorun.inf files.The scanner was looking in the following location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\Autorun.inf

My question is:If there is no registry entry for Autorun.inf is this really a vulnerability or a false positive?

Any help would be appreciated. I looked in Microsofts KBs and they have you change settings in a totally different location to disable the autorun feature.

If there is no registry entry for Autorun.inf is this really a vulnerabilit

Yes it is a Venerability and depending on what you are using this computer to do it may be beneficial to disable the AutoRun Feature.

The reason it is a Venerability is that it will allow any code to run without you authorizing it and if that code was a Infection of some sort that you got in an Attachment in a E-Mail or from visiting a Infected Web Site it would autorun and infect your computer. That is the venerability.

And in answer to the finial bit of your question No it's not a False Positive.

Start or search

Create a new discussion

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

Post type

Subject title

Topic Tags

Select up to 3 tags (1 tag required)

Cloud

Piracy

Security

Apple

Microsoft

IT Employment

Google

Open Source

Mobility

Social Enterprise

Community

Smartphones

Operating Systems

Windows

Mac

Malware

Tablets

Networking

Browser

Hardware

Software

Web Developerment

Linux

Off Topic

Message Body

Track this discussion and email me when there are updates

Please note: Do not post advertisements, offensive material, profanity, or personal attacks. Please remember to be considerate of other members. If you're new to the TechRepublic Forums, please read our TechRepublic Forums FAQ. All submitted content is subject to our Terms Of Use.